Solved: (46) Server Not Allowed Access

as9 · ‎03-17-2015

Hello,

We are having an issue with connecting our backup server connected to our domain and a workgroup computer in our DMZ. We have attempted to update the host files, inputted the server directly in the registry, checked the firewall settings, and checked communication between server and clients.

Note:

Master server (10.1.12.64) is connected to our domain, and the client server (10.1.100.25) is on a workgroup.

I'm baffled why our firewall IP is trying to be used as the master/media server? Below is the log file from the client server.

12:25:22.518 [4856.1208] <2> setup_debug_log: switched debug log file for bpcd
12:25:22.518 [4856.1208] <4> bpcd main: VERBOSE=0, BPCD VERBOSE=0 Timestamp=1426181836
12:25:22.518 [4856.1208] <2> logparams: C:\Program Files\Veritas\NetBackup\bin\bpcd.exe -standalone
12:25:22.518 [4856.1208] <2> process_requests: offset to GMT 25200
12:25:22.534 [4856.1208] <2> logconnections: BPCD ACCEPT FROM 10.1.100.1.21585 TO 10.1.100.25.1556 fd = 460
12:25:22.534 [4856.1208] <2> process_requests: setup_sockopts complete
12:25:27.074 [4856.1208] <8> retry_getnameinfo: [vnet_addrinfo.c:1143] getnameinfo() failed 11004 0x2afc
12:25:27.074 [4856.1208] <8> vnet_cached_getnameinfo: [vnet_addrinfo.c:1914] retry_getnameinfo() failed RV=11004 IPSTR=10.1.100.1 PORT=21585
12:25:27.074 [4856.1208] <2> bpcd peer_hostname: vnet_cached_getnameinfo() failed: 6 11004
12:25:27.074 [4856.1208] <2> bpcd peer_hostname: Connection from host 10.1.100.1 (10.1.100.1) port 21585
12:25:27.074 [4856.1208] <2> bpcd valid_server: comparing backupserver.domain.com and 10.1.100.1
12:25:27.074 [4856.1208] <2> bpcd valid_server: comparing 10.1.12.64 and 10.1.100.1
12:25:27.074 [4856.1208] <4> bpcd valid_server: 10.1.100.1 is not a master server
12:25:27.074 [4856.1208] <16> bpcd valid_server: 10.1.100.1 is not a media server either
12:25:27.074 [4856.1208] <2> process_requests: output socket port number = 1
12:25:27.167 [4856.1208] <2> process_requests: Duplicated vnetd socket on stderr
12:25:27.167 [4856.1208] <2> process_requests: <---- NetBackup 7.6.1 0 ------------initiated
12:25:27.167 [4856.1208] <2> process_requests: VERBOSE = 0
12:25:27.167 [4856.1208] <2> bpcd exit_bpcd: exit status 46 ----------->exiting
12:25:27.167 [4856.1208] <4> bpcd exit_bpcd: FTL - BPCD EXIT STATUS 46
12:25:27.167 [4856.1208] <16> process_requests: Server access denied
12:25:27.261 [5912.6056] <2> setup_debug_log: switched debug log file for bpcd
12:25:27.261 [5912.6056] <4> bpcd main: VERBOSE=0, BPCD VERBOSE=0 Timestamp=1426181836
12:25:27.261 [5912.6056] <2> logparams: C:\Program Files\Veritas\NetBackup\bin\bpcd.exe -standalone
12:25:27.261 [5912.6056] <2> process_requests: offset to GMT 25200
12:25:27.261 [5912.6056] <2> logconnections: BPCD ACCEPT FROM 10.1.100.1.43848 TO 10.1.100.25.1556 fd = 460
12:25:27.261 [5912.6056] <2> process_requests: setup_sockopts complete
12:25:31.816 [5912.6056] <8> retry_getnameinfo: [vnet_addrinfo.c:1143] getnameinfo() failed 11004 0x2afc
12:25:31.816 [5912.6056] <8> vnet_cached_getnameinfo: [vnet_addrinfo.c:1914] retry_getnameinfo() failed RV=11004 IPSTR=10.1.100.1 PORT=43848
12:25:31.816 [5912.6056] <2> bpcd peer_hostname: vnet_cached_getnameinfo() failed: 6 11004
12:25:31.816 [5912.6056] <2> bpcd peer_hostname: Connection from host 10.1.100.1 (10.1.100.1) port 43848
12:25:31.816 [5912.6056] <2> bpcd valid_server: comparing clientserver.domain.com and 10.1.100.1
12:25:31.816 [5912.6056] <2> bpcd valid_server: comparing 10.1.12.64 and 10.1.100.1
12:25:31.816 [5912.6056] <4> bpcd valid_server: 10.1.100.1 is not a master server
12:25:31.816 [5912.6056] <16> bpcd valid_server: 10.1.100.1 is not a media server either
12:25:31.816 [5912.6056] <2> process_requests: output socket port number = 1
12:25:31.910 [5912.6056] <2> process_requests: Duplicated vnetd socket on stderr
12:25:31.910 [5912.6056] <2> process_requests: <---- NetBackup 7.6.1 0 ------------initiated
12:25:31.910 [5912.6056] <2> process_requests: VERBOSE = 0
12:25:31.910 [5912.6056] <2> bpcd exit_bpcd: exit status 46 ----------->exiting
12:25:31.925 [5912.6056] <4> bpcd exit_bpcd: FTL - BPCD EXIT STATUS 46 <?xml version="1.0" encoding="utf-8"?><StatusMsgDoc><StatusMsg NBUStatus="46" Severity="2" VXULoid="137" VXULtid="114">10.1.100.110.1.100.1clientserver.domain.com10.1.100.25<MsgString>Request from host 10.1.100.1 (10.1.100.1) to host clientserver.domain.com (10.1.100.25) is not allowed access.</MsgString><StatusMsg NBUStatus="46" Severity="0" VXULoid="137" VXULtid="115">10.1.100.110.1.100.1clientserver<MsgString>Host 10.1.100.1 (10.1.100.1) is not an authorized server for host clientserver.</MsgString></StatusMsg></StatusMsg></StatusMsgDoc>
12:25:31.925 [5912.6056] <16> process_requests: Server access denied
12:25:32.003 [4424.3652] <2> setup_debug_log: switched debug log file for bpcd
12:25:32.003 [4424.3652] <4> bpcd main: VERBOSE=0, BPCD VERBOSE=0 Timestamp=1426181836
12:25:32.003 [4424.3652] <2> logparams: C:\Program Files\Veritas\NetBackup\bin\bpcd.exe -standalone
12:25:32.003 [4424.3652] <2> process_requests: offset to GMT 25200
12:25:32.019 [4424.3652] <2> logconnections: BPCD ACCEPT FROM 10.1.100.1.15098 TO 10.1.100.25.1556 fd = 460
12:25:32.019 [4424.3652] <2> process_requests: setup_sockopts complete
12:25:36.558 [4424.3652] <8> retry_getnameinfo: [vnet_addrinfo.c:1143] getnameinfo() failed 11004 0x2afc
12:25:36.558 [4424.3652] <8> vnet_cached_getnameinfo: [vnet_addrinfo.c:1914] retry_getnameinfo() failed RV=11004 IPSTR=10.1.100.1 PORT=15098
12:25:36.558 [4424.3652] <2> bpcd peer_hostname: vnet_cached_getnameinfo() failed: 6 11004
12:25:36.558 [4424.3652] <2> bpcd peer_hostname: Connection from host 10.1.100.1 (10.1.100.1) port 15098
12:25:36.558 [4424.3652] <2> bpcd valid_server: comparing backupserver.domain.com and 10.1.100.1
12:25:36.558 [4424.3652] <2> bpcd valid_server: comparing 10.1.12.64 and 10.1.100.1
12:25:36.558 [4424.3652] <4> bpcd valid_server: 10.1.100.1 is not a master server
12:25:36.558 [4424.3652] <16> bpcd valid_server: 10.1.100.1 is not a media server either
12:25:36.558 [4424.3652] <2> process_requests: output socket port number = 1
12:25:36.636 [4424.3652] <2> process_requests: Duplicated vnetd socket on stderr
12:25:36.636 [4424.3652] <2> process_requests: <---- NetBackup 7.6.1 0 ------------initiated
12:25:36.636 [4424.3652] <2> process_requests: VERBOSE = 0
12:25:36.636 [4424.3652] <2> bpcd exit_bpcd: exit status 46 ----------->exiting
12:25:36.636 [4424.3652] <4> bpcd exit_bpcd: FTL - BPCD EXIT STATUS 46
12:25:36.636 [4424.3652] <16> process_requests: Server access denied
12:25:36.730 [4980.4044] <2> setup_debug_log: switched debug log file for bpcd
12:25:36.730 [4980.4044] <4> bpcd main: VERBOSE=0, BPCD VERBOSE=0 Timestamp=1426181836
12:25:36.730 [4980.4044] <2> logparams: C:\Program Files\Veritas\NetBackup\bin\bpcd.exe -standalone
12:25:36.730 [4980.4044] <2> process_requests: offset to GMT 25200
12:25:36.730 [4980.4044] <2> logconnections: BPCD ACCEPT FROM 10.1.100.1.32373 TO 10.1.100.25.1556 fd = 460
12:25:36.730 [4980.4044] <2> process_requests: setup_sockopts complete
12:25:41.285 [4980.4044] <8> retry_getnameinfo: [vnet_addrinfo.c:1143] getnameinfo() failed 11004 0x2afc
12:25:41.285 [4980.4044] <8> vnet_cached_getnameinfo: [vnet_addrinfo.c:1914] retry_getnameinfo() failed RV=11004 IPSTR=10.1.100.1 PORT=32373
12:25:41.285 [4980.4044] <2> bpcd peer_hostname: vnet_cached_getnameinfo() failed: 6 11004
12:25:41.285 [4980.4044] <2> bpcd peer_hostname: Connection from host 10.1.100.1 (10.1.100.1) port 32373
12:25:41.285 [4980.4044] <2> bpcd valid_server: comparing backupserver.domain.com and 10.1.100.1
12:25:41.285 [4980.4044] <2> bpcd valid_server: comparing 10.1.12.64 and 10.1.100.1
12:25:41.285 [4980.4044] <4> bpcd valid_server: 10.1.100.1 is not a master server
12:25:41.285 [4980.4044] <16> bpcd valid_server: 10.1.100.1 is not a media server either
12:25:41.285 [4980.4044] <2> process_requests: output socket port number = 1
12:25:41.363 [4980.4044] <2> process_requests: Duplicated vnetd socket on stderr
12:25:41.363 [4980.4044] <2> process_requests: <---- NetBackup 7.6.1 0 ------------initiated
12:25:41.363 [4980.4044] <2> process_requests: VERBOSE = 0
12:25:41.363 [4980.4044] <2> bpcd exit_bpcd: exit status 46 ----------->exiting
12:25:41.379 [4980.4044] <4> bpcd exit_bpcd: FTL - BPCD EXIT STATUS 46 <?xml version="1.0" encoding="utf-8"?><StatusMsgDoc><StatusMsg NBUStatus="46" Severity="2" VXULoid="137" VXULtid="114">10.1.100.110.1.100.1clientserver.domain.com10.1.100.25<MsgString>Request from host 10.1.100.1 (10.1.100.1) to host clientserver.domain.com (10.1.100.25) is not allowed access.</MsgString><StatusMsg NBUStatus="46" Severity="0" VXULoid="137" VXULtid="115">10.1.100.110.1.100.1clientserver<MsgString>Host 10.1.100.1 (10.1.100.1) is not an authorized server for host clientserver.</MsgString></StatusMsg></StatusMsg></StatusMsgDoc>
12:25:41.379 [4980.4044] <16> process_requests: Server access denied

Thank you for your help.

Marianne · ‎03-17-2015

As per Nicolai's post - the firewall is masking the IP address of incoming connection request. You need to speak to firewall admins. As a workaround, add another hosts entry for the master ser on the client: 10.1.12.64 Master-name 10.1.100.1 Master-name 'Master-name' will be the name in Server entry in the registry. Please use names in NBU rather than IP adresses.

Handy NetBackup Links

View solution in original post

Nicolai · ‎03-17-2015

Is the firewall doing NAT (Network Address Translation ) or PAT (Port Address Translation ) ?

Amol_Nair · ‎03-17-2015

on the client machine add the following IP address as an additional server entry "10.1.100.1" In the registry on the client machine in HKLM > Software > Veritas > Netbackup > Current version > config > SERVERS put the following ip address 10.1.100.1 clear the host cache on both the master server and the client machine and then retry the bptestbpcd command.

SymTerry · ‎03-17-2015

Like Nicolai mentioned make sure the firewall is not messing with traffic. Also NetBackup is going to rely on DNS, both forward and reverse lookup. Please check communication with bpclntcmd (TECH50198) and bptestbpcd (TECH42657) to get further information. Also what does a simple nslookup tell you?

Something is telling NetBackup your client is at 10.1.100.1.

Will_Restore · ‎03-17-2015

Firewall has to be set to allow pbx port 1556 to/from master 10.1.12.64 and client 10.1.100.25

Marianne · ‎03-17-2015

As per Nicolai's post - the firewall is masking the IP address of incoming connection request. You need to speak to firewall admins. As a workaround, add another hosts entry for the master ser on the client: 10.1.12.64 Master-name 10.1.100.1 Master-name 'Master-name' will be the name in Server entry in the registry. Please use names in NBU rather than IP adresses.

Handy NetBackup Links

as9 · ‎03-20-2015

Thank you, we are NATing through a firewall. We will give the host entry recommendation a try and get back with results.

Thank you all.

Nicolai · ‎03-23-2015

NAT is not currently supported by Netbackup. You may get it to work but it will be unsupported.

Network Address Translation and Port Address Translation are not supported for Symantec NetBackup (tm) 6.x and 7.x

http://www.symantec.com/docs/TECH15006

VOX

(46) Server Not Allowed Access